Configuring shibboleth SP NameID format persistent

Cantor, Scott cantor.2 at
Tue Jun 16 21:22:55 UTC 2020

On 6/16/20, 5:10 PM, "users on behalf of Feinstein, Moses" <users-bounces at on behalf of moses.feinstein at> wrote:

>	Simply change  SAML2AttributeSourcedGenerator to the following:

Persistent NameIDs are handled by the pre-existing persistent generator plugin/bean that's already there. What you're posting there is not appropriate as a source for a SAML persistent NameID, because they have to be pairwise/targeted and that is not. It's undermining the core property they're supposed to have.

-- Scott

More information about the users mailing list